CVE-2019-12930 - A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter

Back Back to CVE browser

MEDIUM

A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter

Published Jul 8, 2019

6.1

MEDIUM

CVSS 3.0

EPSS 1.14%

Description

A cross-site scripting (XSS) vulnerability in noMenu() and noSubMenu() in core/navigation/MENU.php in WIKINDX prior to version 5.8.1 allows remote attackers to inject arbitrary web script or HTML via the method parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4507
Advisory
https://sourceforge.net/p/wikindx/code/2787
x_refsource_CONFIRMPatchThird Party Advisory
https://sourceforge.net/p/wikindx/code/2788
x_refsource_CONFIRMThird Party Advisory
https://sourceforge.net/p/wikindx/news/2019/07/wikindx-581-released/
x_refsource_CONFIRMRelease NotesThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4507		Advisory
https://sourceforge.net/p/wikindx/code/2787		x_refsource_CONFIRMPatchThird Party Advisory
https://sourceforge.net/p/wikindx/code/2788		x_refsource_CONFIRMThird Party Advisory
https://sourceforge.net/p/wikindx/news/2019/07/wikindx-581-released/		x_refsource_CONFIRMRelease NotesThird Party Advisory